DNP3.0 (Distributed Network Protocol) for Acuvim II Series Power Meter Structure Model User Layer User Data AH User Data Application Layer APDU TH APDU Transport Layer TPDU Link Layer LH TPDU Physical Layer Figure 1 Each Layer of the relationship between the data unit 1 Overview This document describes the DNP V3.00 communications protocol employed by Acuvim II Series Power Meter. This protocol can be selected for the serial communication port which can consist of RS232/RS485. It is assumed that the reader is familiar with the DNP V3.00 protocol and serial communications in general. This DNP3 is a reduced set of the Distributed Network Protocol Version 3.00, and it gives enough functionality to get critical measurement from the Acuvim II Series Power Meter. The DNP3 supports class0 object only. No event generation is supported.this DNP3 is always act as a slave device. Page 1 of 12
2 Physical Layer The physical layer supported by DNP3 must transmit or receive data in serial mode. The data unit transferred will be 8 bits in length. The port must be asynchronous half-duplex RS-485. The data format supporting 8 bit data, 1 start bit, 1 stop bit, no parity. The baud rate can be set to any supported value. 3 Data Link Layer The Acuvim II Series Power Meter always acts as a Slave device.the device address can be set from 0 to 65534. The link layer comply with the stand FT3 frame format. The fixed length user data field is behind the fixed head. The link layer supports Reset Link, Reset User and Read Link Status. In order to ensure the stability of communication, it is recommended that you should better reset the link and reset the user before communicate with the Acuvim II Series Power Meter. The function code supported as follows: Reset Link ( 0X00 ), Reset User ( 0X01 ), Link Status ( 0X09 ). FT3 Frame Format: An FT3 frame is defined as a fixed length header block followed by optional data blocks. Each block has a 16-bit CRC appended to it. The header fields consist of 2 start octets, 1 octet length, 1 octet control, a destination address, a source address and a 16-bit CRC appended to it. Start 0x05 Start 0x64 block 0 Block 1 Block N length control Destination Source CRC User CRC User CRC Address Address Data Data. fix length head body 4 Transport Layer The pseudo-transport layer segments application layer messages into multiple data link frames. For each frame, it inserts a single byte function code that indicates if the data link frame is the first frame of the message, the last frame of a message, or both (for single frame messages). The function code also includes a rolling frame sequence number which increments with each frame and allows the receiving transport layer to detect dropped frames. 5 Application Layer The Acuvim II Series Power Meter implementation supports a subset of the objects and application layer function codes. The Acuvim II Series Power Meter will neither accept nor send multiple fragment application layer messages. The Acuvim II Series Power Meter s fragment size is fixed at 2k bytes. Page 2 of 12
Each application layer fragment begins with an application layer header followed by one object header or object header and data combinations. The application layer header contains an application control code and an application function code. The application control code contains an indication if the fragment is one of a multi-fragment message, contains an indication if an application layer confirmation is requested for the fragment, contains an indication if the fragment was unsolicited, and contains a rolling application layer sequence number. The application layer sequence number allows the receiving application layer to detect fragments that are out of sequence, or dropped fragments. In the Acuvim II Series Power Meter, the Dnp3 supports the Read function, the Direct Operate function and the Direct Operate Unconfirmed function. The Read function ( 0X01 ) The read function is the basic code used for requesting data objects from an Outstation. Here this function is used for reading the measurement data from the Power Meter. Learning more about the measurement data, please refer to the Data Address Table. In this function, the qualifier could be selected contain 0X00, 0X01, 0X06. The qualifier 0X00 refers that there two bytes called Range followed by, one is the start address want to request, the second is the stop address, this Range would be from 0 to 255. The qualifier 0X01 indicates that the followed Range there are four bytes, the first two is the Start Address want to be request, the last two is the Stop Address, the two bytes consist of two 8-bit binary number, the low byte first, that the address Range would be from 0 to 65535. The qualifier 0X06 means read All data from the object with its respective variations which would be list in the queue. More about the message please see Message Layout, the detailed examples. The Direct Operate function ( 0X05 ) The function is selects and sets or operates the specified outputs, the status of the control points will be responded. Here this function is intended for resetting the energy counters and the demand counters. These actions are mapped to Objects 12 Variations 1, point 1 and point 2, there are seen as a control relay. The relay must be operated On in 0 millisecond, and released Off in 1 millisecond.the qualifiers 0X17 and 0X28 are supported for writing the energy reset and demand reset. The examples will be shown in Message Layout. The Direct Operate function ( 0X06 ) The function is selects and sets or operates the specified outputs but do not send a response to the request. Here this function is intended for switching the DNP3 protocol to Modbus protocol using the same communication port. This switching is seen as a control relay mapped into Object 12 Variation 1 and point 0 in the Acuvim II series Power Meter. The relay must be operated with qualifier 0X17, code 3, count 0, with 0 millisecond On and 1millisecond Off. After sending the request the current communication port will be changed to the Modbus protocol only. The example will be shown in the Message Layout. Page 3 of 12
6 Error Reply When meet the can t recognize request, the unknown Object,the unknown variation,the point unsupported, the unsupported function code, the unsupported qualifier,the unsupported range, the buffer overflow or any other exception error, an error reply will be generate from the Acuvim II series Power Meter to send to the requester station. The Internal Indicator field will reflect the type of error. 7 Profile 1) Device Function Slave 2) Maximum Data Link Frame Size Transmitted 292 Received 292 3) Maximum Application Fragment Size Transmitted 2048 Received 2048 4) Transport Multi-Fragment Supported 5) Data Link Layer Confirmation Supported 6) Application Layer Confirmation Supported 7) Application Layer Function Request Supported 0X01,Read Qualifier,0X00,0X01,0X06. Response Supported 129,Read Response Qualifier,0X00 Supported Error Internal Indicator Response 8) DATA OBJECT LIBRARY a) ANALOG INPUT OBJECT 30 Variation: 3,32-BIT ANALOG INPUT WITHOUT FLAG Variation: 4,16-BIT ANALOG INPUT WITHOUT FLAG Variation 5,32-BIT FLOAT WITH FLAG b) COUNTER OBJECT DEFINITIONS 20 Variation: 5,32-BIT COUNTER WITHOUT FLAG c) ALTERNATE NUMERIC OBJECT 100 Variation: 1,SHORT FLOATING POINT d) CONTROL RELAY OUTPUT BLOCK Object 12 Variation: 01,static digital output control Page 4 of 12
8 Data Address Table Point Descriptions The following tables describe the DNP V3.0 data objects provided by the Acuvim II series Power Meter. The object, variation, and point numbers are specified for each parameter, as well as the application layer function codes which may be used to operate on the parameter. Description: Object Variation 30 3 Object Variation 30 4 Object Variation 30 5 Object Variation 100 1 Object Variation 20 5 Object Variation 12 1 32-BIT ANALOG INPUT WITHOUT FLAG 16-BIT ANALOG INPUT WITHOUT FLAG 32-BIT FLOAT INPUT WITH FLAG 32-BIT FLOAT INPUT WITH FLAG 32-BIT COUNTER WITHOUT FLAG CONTROL RELAY OUTPUT BLOCK Address Table: Page 5 of 12
Page 6 of 12
Page 7 of 12
Page 8 of 12
9 DNP3 Message Layout The following table is the abbreviation and explain. DestL DestH SorcL SorcH CrcL CrcH x y II1 II2 The destination address low byte The destination address high byte The source address low byte The source address high byte The Cyclic Redundancy Checksum low byte The Cyclic Redundancy Checksum high byte The transport layer data sequence num The application layer data sequence num The first byte of Internal Indicator The second byte of Internal Indicator Link Layer Frames: Reset Link: Request 05 64 05 C0 DestL DestH SorcL SorcH CrcL CrcH Response 05 64 05 00 SorcL SorcH DestL DestH CrcL CrcH Reset User: Request 05 64 05 C1 DestL DestH SorcL SorcH CrcL CrcH Response 05 64 05 00 SorcL SorcH DestL DestH CrcL CrcH Link Status: Request 05 64 05 C9 DestL DestH SorcL SorcH CrcL CrcH Response 05 64 05 0B SorcL SorcH DestL DestH CrcL CrcH Page 9 of 12
Application Layer Frames: Reset Energy: Reset Demand: Page 10 of 12
Switch to Modbus: Request Data: Qualifier 0X06: Qualifier 0X00: Qualifier 0X00: Page 11 of 12
Qualifier 0X01: Error Reply: Error Reply Response 05 64 0A 44 DestL DestH SorcL SorcH CrcL CrcH Cx Cy 81 II1 II2 CrcL CrcH Page 12 of 12